@bsv/sdk 1.9.29 → 1.9.31

package/dist/types/src/messages/EncryptedMessage.d.ts

@@ -8,6 +8,25 @@ import PrivateKey from '../primitives/PrivateKey.js';
  *
  * @returns The encrypted message
  */
+/**
+ * SECURITY NOTE – NON-AUTHENTICATED KEY EXCHANGE
+ *
+ * This encrypted message protocol does NOT implement a formally authenticated
+ * key exchange (AKE). Session keys are deterministically derived from long-term
+ * identity keys and a sender-chosen invoice value.
+ *
+ * As a result, this protocol does NOT provide:
+ *  - Forward secrecy
+ *  - Replay protection
+ *  - Explicit authentication of peer identity
+ *
+ * This scheme SHOULD NOT be used for high-value, long-lived, or sensitive
+ * communications. It is intended for lightweight messaging where both parties
+ * already possess each other's long-term public keys and accept these risks.
+ *
+ * Future versions may introduce a protocol upgrade based on a standard AKE
+ * (e.g. X3DH, Noise, or SIGMA).
+ */
 export declare const encrypt: (message: number[], sender: PrivateKey, recipient: PublicKey) => number[];
 /**
  * Decrypts a message from one party to another using the BRC-78 message encryption protocol.

package/dist/types/src/messages/EncryptedMessage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"EncryptedMessage.d.ts","sourceRoot":"","sources":["../../../../src/messages/EncryptedMessage.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,4BAA4B,CAAA;AAClD,OAAO,UAAU,MAAM,6BAA6B,CAAA;AAOpD;;;;;;;GAOG;AACH,eAAO,MAAM,OAAO,GAClB,SAAS,MAAM,EAAE,EACjB,QAAQ,UAAU,EAClB,WAAW,SAAS,KACnB,MAAM,EAkBR,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,OAAO,GAAI,SAAS,MAAM,EAAE,EAAE,WAAW,UAAU,KAAG,MAAM,EA0BxE,CAAA"}
+{"version":3,"file":"EncryptedMessage.d.ts","sourceRoot":"","sources":["../../../../src/messages/EncryptedMessage.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,4BAA4B,CAAA;AAClD,OAAO,UAAU,MAAM,6BAA6B,CAAA;AAOpD;;;;;;;GAOG;AACH;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,OAAO,GAClB,SAAS,MAAM,EAAE,EACjB,QAAQ,UAAU,EAClB,WAAW,SAAS,KACnB,MAAM,EAkBR,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,OAAO,GAAI,SAAS,MAAM,EAAE,EAAE,WAAW,UAAU,KAAG,MAAM,EA0BxE,CAAA"}

package/dist/types/src/primitives/AESGCM.d.ts

@@ -5,6 +5,24 @@ export declare const getBytes64: (numericValue: number) => number[];
 type Bytes = Uint8Array;
 export declare const exclusiveOR: (block0: Bytes, block1: Bytes) => Bytes;
 export declare const rightShift: (block: Bytes) => Bytes;
+/**
+ * SECURITY NOTE – TIMING SIDE-CHANNEL MITIGATION
+ *
+ * This GHASH multiplication implementation avoids data-dependent conditional
+ * branches by using mask-based operations instead. This reduces timing
+ * side-channel leakage compared to a naive implementation that branches on
+ * secret bits.
+ *
+ * IMPORTANT: JavaScript and TypedArray operations do NOT provide constant-time
+ * execution guarantees. While this implementation mitigates obvious control-
+ * flow timing leaks, it must not be considered constant-time in a strict
+ * cryptographic sense and is not suitable for hostile shared-CPU or
+ * multi-tenant environments.
+ *
+ * Applications requiring strict constant-time AES-GCM SHOULD use a dedicated,
+ * audited cryptographic library (e.g. noble-ciphers, WebCrypto, or BearSSL
+ * bindings).
+ */
 export declare const multiply: (block0: Bytes, block1: Bytes) => Bytes;
 export declare const incrementLeastSignificantThirtyTwoBits: (block: Bytes) => Bytes;
 export declare function ghash(input: Bytes, hashSubKey: Bytes): Bytes;

package/dist/types/src/primitives/AESGCM.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AESGCM.d.ts","sourceRoot":"","sources":["../../../../src/primitives/AESGCM.ts"],"names":[],"mappings":"AAyIA,wBAAgB,GAAG,CAAE,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAgD7D;AAED,eAAO,MAAM,QAAQ,GACnB,WAAW,MAAM,EAAE,EACnB,WAAW,MAAM,EACjB,UAAU,MAAM,KACf,CAAC,GAAG,CAEN,CAAA;AAED,eAAO,MAAM,QAAQ,GAAa,cAAc,MAAM,KAAG,MAAM,EAO9D,CAAA;AAED,eAAO,MAAM,UAAU,GAAa,cAAc,MAAM,KAAG,MAAM,EAkBhE,CAAA;AAED,KAAK,KAAK,GAAG,UAAU,CAAA;AA2BvB,eAAO,MAAM,WAAW,GAAa,QAAQ,KAAK,EAAE,QAAQ,KAAK,KAAG,KAOnE,CAAA;AAQD,eAAO,MAAM,UAAU,GAAa,OAAO,KAAK,KAAG,KAelD,CAAA;AAED,eAAO,MAAM,QAAQ,GAAa,QAAQ,KAAK,EAAE,QAAQ,KAAK,KAAG,KAoBhE,CAAA;AAED,eAAO,MAAM,sCAAsC,GACjD,OAAO,KAAK,KACX,KAYF,CAAA;AAED,wBAAgB,KAAK,CAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,GAAG,KAAK,CAa7D;AAqED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AACH,wBAAgB,MAAM,CACpB,SAAS,EAAE,KAAK,EAChB,oBAAoB,EAAE,KAAK,EAC3B,GAAG,EAAE,KAAK,GACT;IAAE,MAAM,EAAE,KAAK,CAAC;IAAC,iBAAiB,EAAE,KAAK,CAAA;CAAE,CAiD7C;AAED,wBAAgB,aAAa,CAC3B,UAAU,EAAE,KAAK,EACjB,oBAAoB,EAAE,KAAK,EAC3B,iBAAiB,EAAE,KAAK,EACxB,GAAG,EAAE,KAAK,GACT,KAAK,GAAG,IAAI,CAoEd"}
+{"version":3,"file":"AESGCM.d.ts","sourceRoot":"","sources":["../../../../src/primitives/AESGCM.ts"],"names":[],"mappings":"AAoKA,wBAAgB,GAAG,CAAE,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAgD7D;AAED,eAAO,MAAM,QAAQ,GACnB,WAAW,MAAM,EAAE,EACnB,WAAW,MAAM,EACjB,UAAU,MAAM,KACf,CAAC,GAAG,CAEN,CAAA;AAED,eAAO,MAAM,QAAQ,GAAa,cAAc,MAAM,KAAG,MAAM,EAO9D,CAAA;AAED,eAAO,MAAM,UAAU,GAAa,cAAc,MAAM,KAAG,MAAM,EAkBhE,CAAA;AAED,KAAK,KAAK,GAAG,UAAU,CAAA;AA2BvB,eAAO,MAAM,WAAW,GAAa,QAAQ,KAAK,EAAE,QAAQ,KAAK,KAAG,KAOnE,CAAA;AAED,eAAO,MAAM,UAAU,GAAa,OAAO,KAAK,KAAG,KAelD,CAAA;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,QAAQ,GAAa,QAAQ,KAAK,EAAE,QAAQ,KAAK,KAAG,KAyBhE,CAAA;AAED,eAAO,MAAM,sCAAsC,GACjD,OAAO,KAAK,KACX,KASF,CAAA;AAED,wBAAgB,KAAK,CAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,GAAG,KAAK,CAa7D;AAqED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AACH,wBAAgB,MAAM,CACpB,SAAS,EAAE,KAAK,EAChB,oBAAoB,EAAE,KAAK,EAC3B,GAAG,EAAE,KAAK,GACT;IAAE,MAAM,EAAE,KAAK,CAAC;IAAC,iBAAiB,EAAE,KAAK,CAAA;CAAE,CAiD7C;AAED,wBAAgB,aAAa,CAC3B,UAAU,EAAE,KAAK,EACjB,oBAAoB,EAAE,KAAK,EAC3B,iBAAiB,EAAE,KAAK,EACxB,GAAG,EAAE,KAAK,GACT,KAAK,GAAG,IAAI,CAoEd"}

package/dist/types/src/primitives/ECDSA.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ECDSA.d.ts","sourceRoot":"","sources":["../../../../src/primitives/ECDSA.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,gBAAgB,CAAA;AACtC,OAAO,SAAS,MAAM,gBAAgB,CAAA;AAEtC,OAAO,KAAyH,MAAM,YAAY,CAAA;AA2ClJ;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,IAAI,GACf,KAAK,SAAS,EACd,KAAK,SAAS,EACd,YAAW,OAAe,EAC1B,UAAU,SAAS,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,SAAS,CAAC,KAClD,SA6EF,CAAA;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,MAAM,GAAI,KAAK,SAAS,EAAE,KAAK,SAAS,EAAE,KAAK,KAAK,KAAG,OA4CnE,CAAA"}
+{"version":3,"file":"ECDSA.d.ts","sourceRoot":"","sources":["../../../../src/primitives/ECDSA.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,gBAAgB,CAAA;AACtC,OAAO,SAAS,MAAM,gBAAgB,CAAA;AAEtC,OAAO,KAAyH,MAAM,YAAY,CAAA;AAoDlJ;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,IAAI,GACf,KAAK,SAAS,EACd,KAAK,SAAS,EACd,YAAW,OAAe,EAC1B,UAAU,SAAS,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,SAAS,CAAC,KAClD,SAsEF,CAAA;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,MAAM,GAAI,KAAK,SAAS,EAAE,KAAK,SAAS,EAAE,KAAK,KAAK,KAAG,OA4CnE,CAAA"}

package/dist/types/src/primitives/Point.d.ts

@@ -269,6 +269,7 @@ export default class Point extends BasePoint {
      * const result = p.mul(2); // this doubles the Point
      */
     mul(k: BigNumber | number | number[] | string): Point;
+    mulCT(k: BigNumber | number | number[] | string): Point;
     /**
      * Performs a multiplication and addition operation in a single step.
      * Multiplies this Point by k1, adds the resulting Point to the result of p2 multiplied by k2.

package/dist/types/src/primitives/Point.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Point.d.ts","sourceRoot":"","sources":["../../../../src/primitives/Point.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,gBAAgB,CAAA;AACtC,OAAO,MAAM,MAAM,oBAAoB,CAAA;AACvC,OAAO,SAAS,MAAM,gBAAgB,CAAA;AAOtC,eAAO,MAAM,OAAO,KAAK,CAAA;AACzB,eAAO,MAAM,MAAM,KAAK,CAAA;AACxB,eAAO,MAAM,MAAM,KAAK,CAAA;AACxB,eAAO,MAAM,QAAQ,KAAK,CAAA;AAC1B,eAAO,MAAM,OAAO,KAAK,CAAA;AACzB,eAAO,MAAM,QAAQ,KAAK,CAAA;AAE1B,eAAO,MAAM,QAAQ,kFAAsE,CAAA;AAC3F,eAAO,MAAM,QAAQ,kFAAsE,CAAA;AAC3F,eAAO,MAAM,QAAQ,QAAoB,CAAA;AAEzC,wBAAgB,GAAG,CAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAYtC;AAED,eAAO,MAAM,KAAK,GAAI,GAAG,MAAM,KAAG,MAAmD,CAAA;AACrF,eAAO,MAAM,QAAQ,GAAI,GAAG,MAAM,EAAE,GAAG,MAAM,KAAG,MAA+C,CAAA;AAC/F,eAAO,MAAM,QAAQ,GAAI,GAAG,MAAM,EAAE,GAAG,MAAM,KAAG,MAAoB,CAAA;AACpE,eAAO,MAAM,QAAQ,GAAI,GAAG,MAAM,EAAE,GAAG,MAAM,KAAG,MAAoB,CAAA;AACpE,eAAO,MAAM,QAAQ,GAAI,GAAG,MAAM,KAAG,MAIpC,CAAA;AACD,eAAO,MAAM,QAAQ,GAAI,GAAG,MAAM,KAAG,MAAwB,CAAA;AAE7D,eAAO,MAAM,QAAQ,GAAI,MAAM,MAAM,EAAE,KAAK,MAAM,KAAG,MAapD,CAAA;AAED,eAAO,MAAM,YAAY,QAAwB,CAAA;AAEjD,eAAO,MAAM,SAAS,GAAI,GAAG,MAAM,KAAG,MAAM,GAAG,IAQ9C,CAAA;AAUD,eAAO,MAAM,SAAS,QAA+E,CAAA;AACrG,eAAO,MAAM,SAAS,QAA+E,CAAA;AAKrG,MAAM,WAAW,eAAe;IAAG,CAAC,EAAE,MAAM,CAAC;IAAC,CAAC,EAAE,MAAM,CAAC;IAAC,CAAC,EAAE,MAAM,CAAA;CAAE;AAEpE,eAAO,MAAM,QAAQ,GAAI,GAAG,eAAe,KAAG,eAc7C,CAAA;AAED,eAAO,MAAM,KAAK,GAAI,GAAG,eAAe,EAAE,GAAG,eAAe,KAAG,eA0B9D,CAAA;AAED,eAAO,MAAM,KAAK,GAAI,GAAG,eAAe,KAAG,eAG1C,CAAA;AAID,eAAO,MAAM,kBAAkB,GAC7B,GAAG,MAAM,EACT,IAAI;IAAE,CAAC,EAAE,MAAM,CAAC;IAAC,CAAC,EAAE,MAAM,CAAA;CAAE,EAC5B,SAAQ,MAAU,KACjB,eAiDF,CAAA;AAED,eAAO,MAAM,IAAI,GAAI,GAAG,MAAM,KAAG,MAIhC,CAAA;AACD,eAAO,MAAM,OAAO,GAAI,GAAG,MAAM,EAAE,GAAG,MAAM,KAAG,MAAqB,CAAA;AAEpE,2EAA2E;AAC3E,eAAO,MAAM,OAAO,GAAI,GAAG,MAAM,KAAG,MASnC,CAAA;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,OAAO,OAAO,KAAM,SAAQ,SAAS;IAC1C,CAAC,EAAE,SAAS,GAAG,IAAI,CAAA;IACnB,CAAC,EAAE,SAAS,GAAG,IAAI,CAAA;IACnB,GAAG,EAAE,OAAO,CAAA;IAEZ,MAAM,CAAC,cAAc,CAAE,CAAC,EAAE,KAAK,GAAG,KAAK;IAOvC;;;;;;;;;;;;;;;OAeG;IACH,MAAM,CAAC,OAAO,CAAE,KAAK,EAAE,MAAM,EAAE,GAAG,KAAK;IAiCvC;;;;;;;;;;;;;;;;OAgBG;IACH,MAAM,CAAC,UAAU,CAAE,GAAG,EAAE,MAAM,GAAG,KAAK;IAKtC;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAC,KAAK,CAAE,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,KAAK;IAqB7E;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAC,QAAQ,CAAE,GAAG,EAAE,MAAM,GAAG,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,GAAG,KAAK;IA8C5D;;;;;;;;;OASG;gBAED,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,EAChD,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,EAChD,KAAK,GAAE,OAAc;IAgCvB;;;;;;;;;;OAUG;IACH,QAAQ,IAAK,OAAO;IAiBpB;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAE,OAAO,GAAE,OAAc,EAAE,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,GAAG,MAAM;IAoBhE;;;;;;;;;;OAUG;IACH,QAAQ,IAAK,MAAM;IAInB;;;;;;;;;OASG;IACH,MAAM,IAAK;QACT,SAAS,GAAG,IAAI;QAChB,SAAS,GAAG,IAAI;QAChB;YACE,OAAO,EAAE;gBAAE,IAAI,EAAE,GAAG,CAAC;gBAAC,MAAM,EAAE,GAAG,EAAE,CAAA;aAAE,GAAG,SAAS,CAAA;YACjD,GAAG,EAAE;gBAAE,GAAG,EAAE,GAAG,CAAC;gBAAC,MAAM,EAAE,GAAG,EAAE,CAAA;aAAE,GAAG,SAAS,CAAA;SAC7C,CAAC;KACH;IA6BD;;;;;;;;;OASG;IACH,OAAO,IAAK,MAAM;IAalB;;;;;;;;OAQG;IACH,UAAU,IAAK,OAAO;IAItB;;;;;;;;;;;OAWG;IACH,GAAG,CAAE,CAAC,EAAE,KAAK,GAAG,KAAK;IA6CrB;;;;;;;;SAQK;IACL,GAAG,IAAK,KAAK;IAkBb;;;;;;OAMG;IACH,IAAI,IAAK,SAAS;IAIlB;;;;;;OAMG;IACH,IAAI,IAAK,SAAS;IAIlB;;;;;;;;;;OAUG;IACH,GAAG,CAAE,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,MAAM,EAAE,GAAG,MAAM,GAAG,KAAK;IAiDtD;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,GAAG,KAAK;IAMvD;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,GAAG,MAAM;IAMzD;;;;;;;;;;;;OAYG;IACH,EAAE,CAAE,CAAC,EAAE,KAAK,GAAG,OAAO;IAQtB;;;;;;;;OAQG;IACH,GAAG,CAAE,WAAW,CAAC,EAAE,OAAO,GAAG,KAAK;IA4BlC;;;;;;;;;;;;;OAaG;IACH,IAAI,CAAE,CAAC,EAAE,MAAM,GAAG,KAAK;IASvB;;;;;;;;;;OAUG;IACH,GAAG,IAAK,MAAM;IAQd,OAAO,CAAC,QAAQ;IAiDhB,OAAO,CAAC,YAAY;IAoCpB,OAAO,CAAC,WAAW;IA2InB,OAAO,CAAC,eAAe;IAsCvB,OAAO,CAAC,WAAW;IAenB,OAAO,CAAC,WAAW;IA4BnB,OAAO,CAAC,aAAa;CAuBtB"}
+{"version":3,"file":"Point.d.ts","sourceRoot":"","sources":["../../../../src/primitives/Point.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,gBAAgB,CAAA;AACtC,OAAO,MAAM,MAAM,oBAAoB,CAAA;AACvC,OAAO,SAAS,MAAM,gBAAgB,CAAA;AAsBtC,eAAO,MAAM,OAAO,KAAK,CAAA;AACzB,eAAO,MAAM,MAAM,KAAK,CAAA;AACxB,eAAO,MAAM,MAAM,KAAK,CAAA;AACxB,eAAO,MAAM,QAAQ,KAAK,CAAA;AAC1B,eAAO,MAAM,OAAO,KAAK,CAAA;AACzB,eAAO,MAAM,QAAQ,KAAK,CAAA;AAE1B,eAAO,MAAM,QAAQ,kFAAsE,CAAA;AAC3F,eAAO,MAAM,QAAQ,kFAAsE,CAAA;AAC3F,eAAO,MAAM,QAAQ,QAAoB,CAAA;AAEzC,wBAAgB,GAAG,CAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAYtC;AAED,eAAO,MAAM,KAAK,GAAI,GAAG,MAAM,KAAG,MAAmD,CAAA;AACrF,eAAO,MAAM,QAAQ,GAAI,GAAG,MAAM,EAAE,GAAG,MAAM,KAAG,MAA+C,CAAA;AAC/F,eAAO,MAAM,QAAQ,GAAI,GAAG,MAAM,EAAE,GAAG,MAAM,KAAG,MAAoB,CAAA;AACpE,eAAO,MAAM,QAAQ,GAAI,GAAG,MAAM,EAAE,GAAG,MAAM,KAAG,MAAoB,CAAA;AACpE,eAAO,MAAM,QAAQ,GAAI,GAAG,MAAM,KAAG,MAIpC,CAAA;AACD,eAAO,MAAM,QAAQ,GAAI,GAAG,MAAM,KAAG,MAAwB,CAAA;AAE7D,eAAO,MAAM,QAAQ,GAAI,MAAM,MAAM,EAAE,KAAK,MAAM,KAAG,MAapD,CAAA;AAED,eAAO,MAAM,YAAY,QAAwB,CAAA;AAEjD,eAAO,MAAM,SAAS,GAAI,GAAG,MAAM,KAAG,MAAM,GAAG,IAQ9C,CAAA;AAUD,eAAO,MAAM,SAAS,QAA+E,CAAA;AACrG,eAAO,MAAM,SAAS,QAA+E,CAAA;AAKrG,MAAM,WAAW,eAAe;IAAG,CAAC,EAAE,MAAM,CAAC;IAAC,CAAC,EAAE,MAAM,CAAC;IAAC,CAAC,EAAE,MAAM,CAAA;CAAE;AAEpE,eAAO,MAAM,QAAQ,GAAI,GAAG,eAAe,KAAG,eAc7C,CAAA;AAMD,eAAO,MAAM,KAAK,GAAI,GAAG,eAAe,EAAE,GAAG,eAAe,KAAG,eA0B9D,CAAA;AAED,eAAO,MAAM,KAAK,GAAI,GAAG,eAAe,KAAG,eAG1C,CAAA;AAID,eAAO,MAAM,kBAAkB,GAC7B,GAAG,MAAM,EACT,IAAI;IAAE,CAAC,EAAE,MAAM,CAAC;IAAC,CAAC,EAAE,MAAM,CAAA;CAAE,EAC5B,SAAQ,MAAU,KACjB,eAiDF,CAAA;AAED,eAAO,MAAM,IAAI,GAAI,GAAG,MAAM,KAAG,MAIhC,CAAA;AACD,eAAO,MAAM,OAAO,GAAI,GAAG,MAAM,EAAE,GAAG,MAAM,KAAG,MAAqB,CAAA;AAEpE,2EAA2E;AAC3E,eAAO,MAAM,OAAO,GAAI,GAAG,MAAM,KAAG,MASnC,CAAA;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,OAAO,OAAO,KAAM,SAAQ,SAAS;IAC1C,CAAC,EAAE,SAAS,GAAG,IAAI,CAAA;IACnB,CAAC,EAAE,SAAS,GAAG,IAAI,CAAA;IACnB,GAAG,EAAE,OAAO,CAAA;IAEZ,MAAM,CAAC,cAAc,CAAE,CAAC,EAAE,KAAK,GAAG,KAAK;IAOvC;;;;;;;;;;;;;;;OAeG;IACH,MAAM,CAAC,OAAO,CAAE,KAAK,EAAE,MAAM,EAAE,GAAG,KAAK;IAiCvC;;;;;;;;;;;;;;;;OAgBG;IACH,MAAM,CAAC,UAAU,CAAE,GAAG,EAAE,MAAM,GAAG,KAAK;IAKtC;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAC,KAAK,CAAE,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,KAAK;IAqB7E;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAC,QAAQ,CAAE,GAAG,EAAE,MAAM,GAAG,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,GAAG,KAAK;IA8C5D;;;;;;;;;OASG;gBAED,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,EAChD,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,EAChD,KAAK,GAAE,OAAc;IAgCvB;;;;;;;;;;OAUG;IACH,QAAQ,IAAK,OAAO;IAiBpB;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAE,OAAO,GAAE,OAAc,EAAE,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,GAAG,MAAM;IAoBhE;;;;;;;;;;OAUG;IACH,QAAQ,IAAK,MAAM;IAInB;;;;;;;;;OASG;IACH,MAAM,IAAK;QACT,SAAS,GAAG,IAAI;QAChB,SAAS,GAAG,IAAI;QAChB;YACE,OAAO,EAAE;gBAAE,IAAI,EAAE,GAAG,CAAC;gBAAC,MAAM,EAAE,GAAG,EAAE,CAAA;aAAE,GAAG,SAAS,CAAA;YACjD,GAAG,EAAE;gBAAE,GAAG,EAAE,GAAG,CAAC;gBAAC,MAAM,EAAE,GAAG,EAAE,CAAA;aAAE,GAAG,SAAS,CAAA;SAC7C,CAAC;KACH;IA6BD;;;;;;;;;OASG;IACH,OAAO,IAAK,MAAM;IAalB;;;;;;;;OAQG;IACH,UAAU,IAAK,OAAO;IAItB;;;;;;;;;;;OAWG;IACH,GAAG,CAAE,CAAC,EAAE,KAAK,GAAG,KAAK;IA6CrB;;;;;;;;SAQK;IACL,GAAG,IAAK,KAAK;IAkBb;;;;;;OAMG;IACH,IAAI,IAAK,SAAS;IAIlB;;;;;;OAMG;IACH,IAAI,IAAK,SAAS;IAIlB;;;;;;;;;;OAUG;IACH,GAAG,CAAE,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,MAAM,EAAE,GAAG,MAAM,GAAG,KAAK;IAqDtD,KAAK,CAAE,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,MAAM,EAAE,GAAG,MAAM,GAAG,KAAK;IAiDxD;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,GAAG,KAAK;IAMvD;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,GAAG,MAAM;IAMzD;;;;;;;;;;;;OAYG;IACH,EAAE,CAAE,CAAC,EAAE,KAAK,GAAG,OAAO;IAQtB;;;;;;;;OAQG;IACH,GAAG,CAAE,WAAW,CAAC,EAAE,OAAO,GAAG,KAAK;IA4BlC;;;;;;;;;;;;;OAaG;IACH,IAAI,CAAE,CAAC,EAAE,MAAM,GAAG,KAAK;IASvB;;;;;;;;;;OAUG;IACH,GAAG,IAAK,MAAM;IAQd,OAAO,CAAC,QAAQ;IAiDhB,OAAO,CAAC,YAAY;IAoCpB,OAAO,CAAC,WAAW;IA2InB,OAAO,CAAC,eAAe;IAsCvB,OAAO,CAAC,WAAW;IAenB,OAAO,CAAC,WAAW;IA4BnB,OAAO,CAAC,aAAa;CAuBtB"}

package/dist/types/src/primitives/PrivateKey.d.ts

@@ -220,6 +220,33 @@ export default class PrivateKey extends BigNumber {
      * const sharedSecret = privateKey.deriveSharedSecret(publicKey);
      */
     deriveSharedSecret(key: PublicKey): Point;
+    /**
+     * SECURITY NOTE – DETERMINISTIC CHILD KEY DERIVATION
+     *
+     * This method derives child private keys deterministically from the caller’s
+     * long-term private key, the counterparty’s public key, and a caller-supplied
+     * invoice number using HMAC over an ECDH shared secret (BRC-42 style derivation).
+     *
+     * This construction does NOT implement a formally authenticated key exchange
+     * (AKE) and does NOT provide the following security properties:
+     *
+     *  - Forward secrecy: Compromise of a long-term private key compromises all
+     *    past and future child keys derived from it.
+     *  - Replay protection: Child keys are deterministic for a given invoice
+     *    number and key pair; previously observed messages can be replayed.
+     *  - Explicit authentication / identity binding: Possession of a public key
+     *    alone does not guarantee the intended peer identity, enabling potential
+     *    identity misbinding attacks if higher-level identity verification is absent.
+     *
+     * This derivation is intended for lightweight, deterministic key hierarchies
+     * where both parties already possess and trust each other’s long-term public
+     * keys. It SHOULD NOT be used as a drop-in replacement for a standard
+     * authenticated key exchange (e.g. X3DH, Noise, or SIGMA) in high-security or
+     * high-value contexts.
+     *
+     * Any future protocol providing forward secrecy, replay protection, or strong
+     * peer authentication will require a versioned, breaking change.
+     */
     /**
      * Derives a child key with BRC-42.
      * @param publicKey The public key of the other party

package/dist/types/src/primitives/PrivateKey.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PrivateKey.d.ts","sourceRoot":"","sources":["../../../../src/primitives/PrivateKey.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,gBAAgB,CAAA;AACtC,OAAO,SAAS,MAAM,gBAAgB,CAAA;AACtC,OAAO,SAAS,MAAM,gBAAgB,CAAA;AACtC,OAAO,KAAK,MAAM,YAAY,CAAA;AAM9B,OAAmB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AAEhE;;;;;;;;;;;;;GAaG;AAEH,qBAAa,SAAS;IACpB,MAAM,EAAE,kBAAkB,EAAE,CAAA;IAC5B,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;gBAGf,MAAM,EAAE,kBAAkB,EAAE,EAC5B,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM;IAOnB,MAAM,CAAC,gBAAgB,CAAE,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS;IA0BrD,cAAc,IAAK,MAAM,EAAE;CAK5B;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,OAAO,OAAO,UAAW,SAAQ,SAAS;IAC/C;;;;;;;;;OASG;IACH,MAAM,CAAC,UAAU,IAAK,UAAU;IAIhC;;;;;;;;;QASI;IACJ,MAAM,CAAC,UAAU,CAAE,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE,MAAM,GAAG,KAAa,GAAG,UAAU;IAIzE;;;;;;;;QAQI;IACJ,MAAM,CAAC,OAAO,CAAE,GAAG,EAAE,MAAM,GAAG,UAAU;IAIxC;;;;;;;;;QASI;IACJ,MAAM,CAAC,OAAO,CAAE,GAAG,EAAE,MAAM,EAAE,YAAY,GAAE,MAAU,GAAG,UAAU;IAWlE;;;;;;;;;;;;;;;OAeG;gBAED,MAAM,GAAE,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,EAAM,EAClD,IAAI,GAAE,MAAM,GAAG,IAAI,GAAG,IAAI,GAAG,KAAU,EACvC,MAAM,GAAE,IAAI,GAAG,IAAW,EAC1B,IAAI,GAAE,OAAO,GAAG,SAAS,GAAG,OAAiB;IAqB/C;;;OAGG;IACH,YAAY,IAAK;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,SAAS,CAAA;KAAE;IAOtD;;OAEG;IACH,OAAO,IAAK,OAAO;IAInB;;;;;;;;;;;;;OAaG;IACH,IAAI,CACF,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EACtB,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EACpB,SAAS,GAAE,OAAc,EACzB,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,SAAS,CAAC,GAAG,SAAS,GAClD,SAAS;IAKZ;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAE,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO;IAKrE;;;;;;;;;;;OAWG;IACH,WAAW,IAAK,SAAS;IAMzB;;;;;;;;;;;;;;;;;OAiBG;IACH,KAAK,CAAE,MAAM,GAAE,MAAM,EAAW,GAAG,MAAM;IAOzC;;;;;;;;;;;;;OAaG;IACH,SAAS,CAAE,MAAM,GAAE,MAAM,EAAE,GAAG,MAAe,GAAG,MAAM;IAItD;;;;;;;;;;OAUG;IACH,KAAK,IAAK,MAAM;IAIhB;;;;;;;;QAQI;IACJ,QAAQ,CAAE,IAAI,GAAE,MAAM,GAAG,KAAa,EAAE,OAAO,GAAE,MAAW,GAAG,MAAM;IAIrE;;;;;;;;;;;;OAYG;IACH,kBAAkB,CAAE,GAAG,EAAE,SAAS,GAAG,KAAK;IAO1C;;;;;;;OAOG;IACH,WAAW,CACT,SAAS,EAAE,SAAS,EACpB,aAAa,EAAE,MAAM,EACrB,iBAAiB,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC,EAC1E,0BAA0B,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC,CAAC,GACnF,UAAU;IAqBb;;;;;;;;;;;OAWG;IACH,WAAW,CAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,SAAS;IAoD/D;;;;;;;;;OASG;IACH,cAAc,CAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE;IAIjE;;;;;;;;;;;;;;;OAeG;IACH,MAAM,CAAC,gBAAgB,CAAE,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU;IAItD;;;;;;;;QAQI;IACJ,MAAM,CAAC,aAAa,CAAE,SAAS,EAAE,SAAS,GAAG,UAAU;CAyBxD"}
+{"version":3,"file":"PrivateKey.d.ts","sourceRoot":"","sources":["../../../../src/primitives/PrivateKey.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,gBAAgB,CAAA;AACtC,OAAO,SAAS,MAAM,gBAAgB,CAAA;AACtC,OAAO,SAAS,MAAM,gBAAgB,CAAA;AACtC,OAAO,KAAK,MAAM,YAAY,CAAA;AAM9B,OAAmB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AAEhE;;;;;;;;;;;;;GAaG;AAEH,qBAAa,SAAS;IACpB,MAAM,EAAE,kBAAkB,EAAE,CAAA;IAC5B,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;gBAGf,MAAM,EAAE,kBAAkB,EAAE,EAC5B,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM;IAOnB,MAAM,CAAC,gBAAgB,CAAE,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS;IA0BrD,cAAc,IAAK,MAAM,EAAE;CAK5B;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,OAAO,OAAO,UAAW,SAAQ,SAAS;IAC/C;;;;;;;;;OASG;IACH,MAAM,CAAC,UAAU,IAAK,UAAU;IAIhC;;;;;;;;;QASI;IACJ,MAAM,CAAC,UAAU,CAAE,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE,MAAM,GAAG,KAAa,GAAG,UAAU;IAIzE;;;;;;;;QAQI;IACJ,MAAM,CAAC,OAAO,CAAE,GAAG,EAAE,MAAM,GAAG,UAAU;IAIxC;;;;;;;;;QASI;IACJ,MAAM,CAAC,OAAO,CAAE,GAAG,EAAE,MAAM,EAAE,YAAY,GAAE,MAAU,GAAG,UAAU;IAWlE;;;;;;;;;;;;;;;OAeG;gBAED,MAAM,GAAE,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,EAAM,EAClD,IAAI,GAAE,MAAM,GAAG,IAAI,GAAG,IAAI,GAAG,KAAU,EACvC,MAAM,GAAE,IAAI,GAAG,IAAW,EAC1B,IAAI,GAAE,OAAO,GAAG,SAAS,GAAG,OAAiB;IAqB/C;;;OAGG;IACH,YAAY,IAAK;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,SAAS,CAAA;KAAE;IAOtD;;OAEG;IACH,OAAO,IAAK,OAAO;IAInB;;;;;;;;;;;;;OAaG;IACH,IAAI,CACF,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EACtB,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EACpB,SAAS,GAAE,OAAc,EACzB,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,SAAS,CAAC,GAAG,SAAS,GAClD,SAAS;IAKZ;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAE,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO;IAKrE;;;;;;;;;;;OAWG;IACH,WAAW,IAAK,SAAS;IAMzB;;;;;;;;;;;;;;;;;OAiBG;IACH,KAAK,CAAE,MAAM,GAAE,MAAM,EAAW,GAAG,MAAM;IAOzC;;;;;;;;;;;;;OAaG;IACH,SAAS,CAAE,MAAM,GAAE,MAAM,EAAE,GAAG,MAAe,GAAG,MAAM;IAItD;;;;;;;;;;OAUG;IACH,KAAK,IAAK,MAAM;IAIhB;;;;;;;;QAQI;IACJ,QAAQ,CAAE,IAAI,GAAE,MAAM,GAAG,KAAa,EAAE,OAAO,GAAE,MAAW,GAAG,MAAM;IAIrE;;;;;;;;;;;;OAYG;IACH,kBAAkB,CAAE,GAAG,EAAE,SAAS,GAAG,KAAK;IAO1C;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH;;;;;;;OAOG;IACH,WAAW,CACT,SAAS,EAAE,SAAS,EACpB,aAAa,EAAE,MAAM,EACrB,iBAAiB,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC,EAC1E,0BAA0B,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC,CAAC,GACnF,UAAU;IAqBb;;;;;;;;;;;OAWG;IACH,WAAW,CAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,SAAS;IAoD/D;;;;;;;;;OASG;IACH,cAAc,CAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE;IAIjE;;;;;;;;;;;;;;;OAeG;IACH,MAAM,CAAC,gBAAgB,CAAE,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU;IAItD;;;;;;;;QAQI;IACJ,MAAM,CAAC,aAAa,CAAE,SAAS,EAAE,SAAS,GAAG,UAAU;CAyBxD"}